write2getherGo to the app

write2gether / Legal

Privacy Policy

This policy explains how KOMUNIQUE GMBH processes personal data when you use write2gether at write2gether.com.

Last updated: 26 September 2026

1. Data Controller

KOMUNIQUE GMBH is the data controller responsible for personal data processed in connection with write2gether at write2gether.com.

KOMUNIQUE GMBH
Blumenrainstrasse 29
9050 Appenzell, Switzerland
Email: support@komunique.com

You can contact us at this address with questions about privacy or requests concerning your data.

2. What Data We Process

When you register and sign in, we process your email address and the data required for your user account and sign-in, such as session and verification data. The sign-in link is sent to your email address.

When you use the service, we store your folders, document titles, document contents and editing histories, as well as information about shares and messages in document chat. For documents edited collaboratively, display names and contributions may be visible to other people with access to the document. Guests can open shared documents without an account; in doing so, a guest identifier and, where applicable, a chosen display name are processed.

If you subscribe to Unlimited, we send your account email address to Stripe and store a Stripe customer reference and the subscription and payment status needed to activate the plan. You enter payment details on Stripe's pages; write2gether does not store full card details.

When you access the app, technically necessary access data is also generated, such as your IP address, the time of access, the page requested and browser information. Such data may be processed in server logs for operation and security purposes.

3. Purposes of Processing

We use this data to provide accounts and sessions, send sign-in links, store documents, and enable collaboration, sharing and chat. We also process necessary technical data to keep the service secure and operational, prevent misuse and respond to requests. Swiss data protection law applies. Where the EU General Data Protection Regulation applies, we rely on performance of a contract for account and subscription services, legitimate interests in operating and securing the service and responding to requests, and legal obligations such as accounting requirements. Where consent is required for particular processing, we obtain it separately; using the service does not constitute blanket consent.

Standard use is free and limited to 10 new Docs, each subject to automatic deletion 30 days after creation. We process subscription and payment status to apply the relevant limits. Stripe handles checkout and recurring payments; you can manage payment methods, invoices and cancellation in the linked Stripe customer portal.

4. Cookies and Local Storage

The app uses technically necessary session and guest cookies for sign-in, the editor and guest recognition. A guest identifier may remain stored in your browser for up to one year; editor session cookies are short-lived. The browser may also store a chosen guest name in local storage, where it expires after 30 days. These storage technologies are needed for the app to function; we do not use advertising cookies.

5. Service Providers and External Content

Hosting and infrastructure providers process stored account data, documents, editing histories, chat messages and technical data to operate the service. Access by us and our service providers is limited to what is needed for operation, support, security and legal obligations.

Resend receives your email address and the sign-in email, including its verification link, to deliver authentication emails. Stripe receives account and billing information and processes payment details on its own pages for subscription payments, invoices and fraud prevention, in accordance with its Privacy Policy.

The app loads Geist and Geist Mono through Google Fonts; the public marketing page also loads Syne. Your browser connects to Google to load these resources, which may disclose your IP address and other technical request data to Google. Hosting in a particular region does not mean that all external services process data only in that region. Where personal data is disclosed abroad, applicable requirements concerning an adequate level of protection, appropriate safeguards or a permitted statutory exception must be met. You can contact us for information about recipients and applicable transfer safeguards.

6. Sharing and Access

Anyone with a valid sharing link can open, edit and copy the relevant document without signing in, access its editing history and document chat, and see associated display names and contributions. A sharing link is not an identity check or a read-only permission. Recipients can forward it. Share links only with people you intend to give this access to and ensure that you may lawfully share any personal data in the document, its history and chat. Revoking a link does not delete copies others have already made.

7. Retention and Security

Free (Standard) Docs are subject to automatic deletion 30 days after creation; later edits and sharing do not extend this period. Starting three days before expiry, the dashboard displays a notice; no expiry email is sent. Docs created while Unlimited is active are exempt from this automatic expiry, including after the subscription ends or a payment fails, and do not count toward the limit of 10 new Free Docs. Docs originally created under Free remain subject to their original creation-based deadline when the account returns to Free.

An exemption from automatic expiry is not a guarantee of permanent storage or recovery. Documents may still be deleted by the owner, through account deletion or lawful termination of the service, or lost through technical incidents. You can delete Docs in the app. For account deletion or other personal-data requests, contact support@komunique.com. Deletion removes access through the service; it cannot remove copies already made by collaborators.

Other personal data is retained only for as long as needed for the purposes described here, to meet legal obligations or to establish, exercise or defend legal claims. Relevant criteria include whether an account is active, security and support needs, and statutory retention periods. Deletion from active systems does not necessarily mean immediate erasure from every technical backup or legally retained record. This does not promise that a backup exists or that content can be restored.

We use technical and organisational safeguards appropriate to the risks. No internet service can guarantee absolute security or prevent every incident. This statement does not waive our obligations under applicable data protection law. Keep independent copies of important content; editing history is not an independent backup.

Stripe billing records and any invoices we hold are subject to applicable statutory retention requirements.

8. Your Rights and Changes

Subject to the conditions and exceptions of applicable law, you may request access to, correction or deletion of your personal data, and where applicable restriction of processing, data portability or disclosure in a commonly used format. Where applicable, you may object to processing based on legitimate interests or withdraw consent for future processing without affecting the lawfulness of earlier processing. Contact support@komunique.com; we may request proportionate information to verify your identity. These rights also apply to guests where we process their personal data.

You may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or another competent supervisory authority, including an EU supervisory authority where the GDPR applies. We will update this policy when processing changes and provide appropriate notice of material changes. The current version and its update date are available here.